Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1330328-ebfd-3593-a363-00510367b9e0.roa
File:                     d1330328-ebfd-3593-a363-00510367b9e0.roa (raw, json)
Hash identifier:          R1vOZS3OqRHqOs0NZZjrcPPz2wu9m0YtAsW5zBL5TGM=
Subject key identifier:   39:1C:39:F9:1F:78:07:E6:B7:DD:DD:8C:C2:39:F7:5D:D6:03:45:D9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E131993927AC5ABEE488778D8
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1330328-ebfd-3593-a363-00510367b9e0.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     397198
IP address blocks:        2620:74:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:93:92:7a:c5:ab:ee:48:87:78:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=60e4b4ee-77c5-4df2-bc21-7318608347f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:35:b2:4c:da:61:75:04:bd:d9:e7:65:1a:19:
                    40:5a:12:65:4d:7e:ce:cc:82:00:cf:d5:f8:8c:bd:
                    47:eb:72:ce:57:e3:f0:e0:2d:bc:64:b2:0f:03:67:
                    14:ab:f1:28:68:3f:e2:7c:be:ff:6f:4d:30:9c:5c:
                    bf:4e:b8:54:8d:70:4c:97:d7:51:14:43:52:40:9f:
                    24:5b:b9:ad:9a:db:b0:f6:a7:6d:5d:81:7a:a8:e0:
                    91:2b:33:e5:43:0e:f9:6f:8d:cf:41:71:68:cd:b6:
                    60:72:5e:f9:1f:9a:d2:5c:c5:2c:ef:56:d3:c5:8f:
                    bc:53:8c:b9:0d:3f:1b:49:44:86:39:e7:fd:0e:1c:
                    d9:ad:a7:fb:e6:45:92:7b:de:1a:19:48:c9:76:31:
                    f1:0d:0a:72:8e:f4:6b:81:10:82:2e:db:98:47:b0:
                    90:4a:f3:ed:9c:60:3b:48:c0:72:0c:05:38:0f:60:
                    51:cc:9d:02:d7:fc:fb:43:8e:99:ee:e1:80:0a:b8:
                    f8:16:24:6d:9e:9d:49:2b:93:02:3e:00:0b:a4:f4:
                    0e:6d:1f:14:2a:fe:16:de:44:e0:7a:f7:92:0d:db:
                    52:19:d6:c1:80:f3:60:b0:59:24:c2:9e:bf:a4:84:
                    01:e6:53:a5:b7:ba:9c:8f:c8:d3:51:f4:09:b6:88:
                    79:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1C:39:F9:1F:78:07:E6:B7:DD:DD:8C:C2:39:F7:5D:D6:03:45:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1330328-ebfd-3593-a363-00510367b9e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6b:b9:bc:74:e3:90:ec:39:98:4c:c7:76:73:4e:8b:68:fb:
         28:d2:c0:fa:67:b6:18:b0:6f:11:3e:73:db:ac:ab:ca:2e:4a:
         07:28:01:06:5e:61:5a:35:83:dc:a8:09:8b:75:b2:a7:cf:fd:
         97:88:2b:c6:20:7a:ce:29:ae:38:47:3f:f6:42:c8:bb:70:04:
         24:90:d0:e0:5a:76:bc:86:ad:b9:bd:95:32:50:53:85:c0:0d:
         4e:be:28:b9:0a:d6:07:75:31:ce:28:4b:2d:11:ad:cf:8c:f2:
         eb:29:3b:29:dd:1b:ad:90:05:62:4b:96:d0:74:73:50:9e:9c:
         5c:41:11:a1:9f:5e:d1:52:d9:e6:13:76:56:c5:33:2f:44:f4:
         9e:48:0d:7b:1b:ad:8d:d4:c7:d9:5f:11:97:e6:06:fb:52:ea:
         75:1c:bf:54:68:c2:ce:d8:73:6a:b2:4a:ea:36:44:8d:90:52:
         e1:72:26:de:c3:df:c2:0e:f5:f3:78:6c:ce:c5:fc:00:7c:7d:
         c1:21:41:d8:2a:8a:96:37:53:d9:33:79:59:a7:1e:36:cd:bd:
         8e:63:b5:96:39:90:b7:7f:e9:85:13:55:ab:0c:e1:03:56:31:
         65:bb:25:b9:73:31:78:0a:00:bc:c4:7d:16:72:9b:53:93:c8:
         6d:fc:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:54 2026 by rpki-client